                              :cylon/identity identity})
 
                      (cookies-response {:status 302
-                       :headers {"Location"
-                                 (format
-                                  ;; TODO: Replace this with the callback uri
-                                  "%s?code=%s&state=%s"
-                                  callback-uri code state
-                                  )}
-                       :cookies {SESSION-ID (->cookie session)}}))))
+                                        :headers {"Location"
+                                                  (format
+                                                   ;; TODO: Replace this with the callback uri
+                                                   "%s?code=%s&state=%s"
+                                                   callback-uri code state
+                                                   )}
+                                        :cookies {SESSION-ID (->cookie session)}}))))
                ;; Fail
                {:status 302
-                :headers {"Location" (format "%s" (path-for (:modular.bidi/routes req) ::get-authenticate-form))}
+                :headers {"Location" (format "%s" (path-for (:modular.bidi/routes req) ::get-login-form))}
                 :body "Try again"})))
 
          wrap-params wrap-cookies s/with-fn-validation)

                  [:p [:a {:href (path-for (:modular.bidi/routes req) :cylon.impl.signup/signup-form)} "Signup"]]]])})
      wrap-params)

     ::post-authenticate-form
     (-> (fn [req]
           (let [params (-> req :form-params)
                 identity (get params "user")

                                     :state state)

                     (cookies-response {:status 302
                                        :headers {"Location" (path-for (:modular.bidi/routes req) ::get-totp-code)}
                                        :cookies {SESSION-ID (->cookie session)}}))

                   ;; So it's not 2FA, continue with OAuth exchange
                   ;; Generate the temporary code that we'll exchange for an access token later
